PT-2021-16765 · Unknown · Kubernetes Java Client Libraries

CVE-2021-25738

Published

2021-10-11

Updated

2022-10-28

CVSS v3.1

6.7

Medium

Vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kubernetes Java Client library (affected versions not specified)

Description Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2021-25738

GHSA-M8WH-MQGF-RR8G

Kubernetes Java Client Libraries